Beware of New Android Trojan That Executes Malicious Commands

Cybersecurity researchers at XLab have uncovered a new Android malware strain called “Wpeeper.” This sophisticated backdoor Trojan has been designed to infiltrate Android systems and execute a wide range of malicious commands, posing a significant threat to unsuspecting users. The malware is being distributed through repackaged applications on the UPtodown app store, a popular third-party … Read more

Threat Actors Attacking MS-SQL Servers to Deploy Ransomware

Cybersecurity experts have uncovered a series of sophisticated cyberattacks targeting poorly managed Microsoft SQL (MS-SQL) servers. The attackers, identified as the TargetCompany ransomware group, have been deploying the Mallox ransomware in a bid to encrypt systems and extort victims. This recent campaign draws unsettling parallels with previous attacks involving the Tor2Mine CoinMiner and BlueSky ransomware, … Read more

Beware! Threat Actors Selling RDP Access on Hacker Forums

Cybersecurity communities are on high alert as threat actors have begun selling Remote Desktop Protocol (RDP) access on underground hacker forums. This alarming trend poses significant risks to individual and organizational cybersecurity, potentially allowing unauthorized access to sensitive information and critical systems. According to a recent tweet from Dark Web Informer, threat actors sell access … Read more

AI Boosts Malware Detection Rates by 70% – Infosecurity Magazine

Threat intelligence-sharing platform VirusTotal has unveiled new research showing how AI can be used by cyber defenders to enhance malware analysis. Through the research, VirusTotal found that AI is extremely effective in analyzing malicious code, identifying 70% more malicious scripts than traditional techniques alone. Researchers also observed that AI was up to 300% more accurate … Read more

US CISA Aims to Expand Automated Malware Analysis Support

Government,Industry Specific,Security Operations The U.S. Cybersecurity and Infrastructure Security Agency is aiming to provide automated malware analysis support to all federal, state and local government agencies with a new version of its next-generation information system. See Also: Zero Trust Unleashed: Keeping Government Secrets Safer Than the Crown Jewels The agency on Wednesday announced wider availability … Read more

Malware Cuckoo – An Infosteler Spyware Steals Data From MacOS

Security researchers have uncovered a previously undetected malware threat for macOS that exhibits characteristics of both an infostealer and spyware. Dubbed “Cuckoo” after the brood parasitic bird, this malicious code infiltrates systems and steals resources for its own gain. The malware was first spotted on April 24th, 2024 in a Mach-O binary file disguised as … Read more

LightSpy Malware Actively Targeting MacOS Devices

BlackBerry reported a new iOS LightSpy malware, but Huntress researchers found it to be a macOS variant targeting Intel or Apple Silicon with Rosetta 2-enabled devices. This caused media confusion, as Apple’s recent spyware alert likely referred to Pegasus spyware, and there is no evidence of an iOS version in this discovery. The researchers also … Read more

New Redline Malware Challenge the SOC/TI Team to Detect

The first instance of Redline using such a method is in a new variant of Redline Stealer malware that McAfee has discovered uses Lua bytecode to obfuscate its malicious code. The malware was discovered on a legitimate Microsoft repository (vcpkg) disguised within a zip file named “Cheat.Lab.2.7.2.zip,”  containing an MSI installer that deployed two executables … Read more

Hackers Infiltrated 9-days Within UnitedHealth Network Before Ransomware Attack

Andrew Witty, CEO of UnitedHealth Group, detailed a sophisticated ransomware attack on Change Healthcare, a key component of the UnitedHealth network. The cybercriminals, identifying themselves as ALPHV or BlackCat, infiltrated Change Healthcare’s information technology environments, marking a significant cybersecurity breach within the healthcare sector. The cyberattack, which unfolded on the morning of February 21, 2024, … Read more